ledgerwatch/erigon 软件分析报告

基础信息

项目名称:ledgerwatch/erigon

项目徽章:

Security Status

仓库地址:https://github.com/pterodactyl/panel

检测报告地址:https://www.murphysec.com/console/report/1758466060518043648/1758466060564180992

此报告由Murphysec提供

漏洞列表

暂无

缺陷组件

暂无

许可证风险

许可证类型 相关组件 许可证风险
BSD-3-Clause 63
MIT 131
Apache-2.0 60
MPL-2.0 10
BSD-2-Clause 12
ISC 6
未知许可证 2
Unlicense 1

SBOM清单

组件名称 组件版本 是否直接依赖 仓库
modernc.org/libc v1.29.0 间接依赖 go
github.com/libp2p/go-netroute v0.2.1 间接依赖 go
github.com/multiformats/go-multihash v0.2.3 间接依赖 go
github.com/dustin/go-humanize v1.0.1 间接依赖 go
github.com/alecthomas/atomic v0.1.0-alpha2 直接依赖 go
github.com/golang-jwt/jwt/v4 v4.5.0 直接依赖 go
github.com/multiformats/go-multiaddr-fmt v0.1.0 间接依赖 go
github.com/Giulio2002/bls v0.0.0-20230906201036-c2330c97dc7d 直接依赖 go
github.com/json-iterator/go v1.1.12 直接依赖 go
github.com/opencontainers/runtime-spec v1.1.0 间接依赖 go
pgregory.net/rapid v1.1.0 直接依赖 go
github.com/multiformats/go-base36 v0.2.0 间接依赖 go
modernc.org/mathutil v1.6.0 间接依赖 go
github.com/klauspost/cpuid/v2 v2.2.5 间接依赖 go
github.com/go-chi/cors v1.2.1 直接依赖 go
golang.org/x/sync v0.6.0 直接依赖 go
github.com/ugorji/go/codec v1.1.13 直接依赖 go
github.com/benbjohnson/immutable v0.4.1-0.20221220213129-8932b999621d 间接依赖 go
github.com/pelletier/go-toml v1.9.5 直接依赖 go
github.com/Masterminds/goutils v1.1.1 间接依赖 go
github.com/pion/srtp/v2 v2.0.9 间接依赖 go
github.com/pion/dtls/v2 v2.2.7 间接依赖 go
github.com/golang/protobuf v1.5.3 间接依赖 go
github.com/dop251/goja v0.0.0-20220405120441-9037c2b61cbf 直接依赖 go
github.com/bahlo/generic-list-go v0.2.0 间接依赖 go
github.com/go-logr/logr v1.2.3 间接依赖 go
github.com/libp2p/go-msgio v0.3.0 间接依赖 go
github.com/julienschmidt/httprouter v1.3.0 直接依赖 go
github.com/ianlancetaylor/cgosymbolizer v0.0.0-20220405231054-a1ae3e4bba26 间接依赖 go
github.com/anacrolix/chansync v0.3.0 间接依赖 go
github.com/quic-go/webtransport-go v0.5.3 间接依赖 go
github.com/hashicorp/golang-lru/v2 v2.0.6 直接依赖 go
go.uber.org/fx v1.20.0 间接依赖 go
github.com/stoewer/go-strcase v1.2.0 间接依赖 go
github.com/99designs/gqlgen v0.17.40 直接依赖 go
github.com/RoaringBitmap/roaring v1.2.3 直接依赖 go
github.com/libp2p/go-nat v0.2.0 间接依赖 go
golang.org/x/text v0.14.0 间接依赖 go
github.com/prometheus/common v0.45.0 间接依赖 go
github.com/VictoriaMetrics/fastcache v1.12.2 直接依赖 go
github.com/garslo/gogen v0.0.0-20170307003452-d6ebae628c7c 间接依赖 go
google.golang.org/grpc v1.60.1 直接依赖 go
github.com/go-logr/stdr v1.2.2 间接依赖 go
golang.org/x/time v0.5.0 直接依赖 go
github.com/google/pprof v0.0.0-20230817174616-7a8ec2ada47b 间接依赖 go
github.com/xsleonard/go-merkle v1.1.0 直接依赖 go
modernc.org/token v1.1.0 间接依赖 go
github.com/prysmaticlabs/gohashtree v0.0.3-alpha.0.20230502123415-aafd8b3ca202 直接依赖 go
modernc.org/sqlite v1.28.0 直接依赖 go
modernc.org/opt v0.1.3 间接依赖 go
github.com/golang/mock v1.6.0 直接依赖 go
github.com/beorn7/perks v1.0.1 间接依赖 go
github.com/sirupsen/logrus v1.9.0 间接依赖 go
github.com/docker/go-units v0.4.0 间接依赖 go
github.com/alecthomas/kong v0.8.1 直接依赖 go
github.com/pion/logging v0.2.2 间接依赖 go
github.com/bits-and-blooms/bitset v1.7.0 间接依赖 go
github.com/ugorji/go/codec/codecgen v1.1.13 直接依赖 go
github.com/crate-crypto/go-kzg-4844 v0.7.0 直接依赖 go
go.uber.org/multierr v1.11.0 间接依赖 go
github.com/cpuguy83/go-md2man/v2 v2.0.3 间接依赖 go
github.com/go-task/slim-sprig v0.0.0-20230315185526-52ccab3ef572 间接依赖 go
github.com/godbus/dbus/v5 v5.0.4 间接依赖 go
github.com/ledgerwatch/log/v3 v3.9.0 直接依赖 go
github.com/go-llsqlite/crawshaw v0.0.0-20230910110433-7e901377eb6c 间接依赖 go
github.com/libp2p/go-libp2p-mplex v0.9.0 直接依赖 go
github.com/libp2p/go-buffer-pool v0.1.0 间接依赖 go
github.com/anacrolix/dht/v2 v2.20.0 直接依赖 go
github.com/containerd/cgroups/v3 v3.0.2 直接依赖 go
github.com/dlclark/regexp2 v1.4.1-0.20201116162257-a2a8dda75c91 间接依赖 go
github.com/hashicorp/go-version v1.6.0 直接依赖 go
github.com/pion/interceptor v0.1.11 间接依赖 go
github.com/multiformats/go-varint v0.0.7 间接依赖 go
github.com/stretchr/testify v1.8.4 直接依赖 go
github.com/rs/cors v1.10.1 直接依赖 go
sigs.k8s.io/yaml v1.4.0 直接依赖 go
github.com/kr/text v0.2.0 间接依赖 go
github.com/onsi/ginkgo/v2 v2.11.0 间接依赖 go
go.uber.org/zap v1.26.0 直接依赖 go
github.com/libp2p/go-reuseport v0.4.0 间接依赖 go
github.com/klauspost/compress v1.17.3 直接依赖 go
github.com/modern-go/reflect2 v1.0.2 间接依赖 go
github.com/prometheus/client_golang v1.18.0 直接依赖 go
github.com/ipfs/go-cid v0.4.1 间接依赖 go
github.com/mikioh/tcpinfo v0.0.0-20190314235526-30a79bb1804b 间接依赖 go
github.com/anacrolix/mmsg v1.0.0 间接依赖 go
github.com/huin/goupnp v1.2.0 直接依赖 go
github.com/bradfitz/iter v0.0.0-20191230175014-e8f45d346db8 间接依赖 go
gopkg.in/cenkalti/backoff.v1 v1.1.0 间接依赖 go
golang.org/x/net v0.20.0 直接依赖 go
github.com/flynn/noise v1.0.0 间接依赖 go
modernc.org/cc/v3 v3.41.0 间接依赖 go
github.com/pion/sdp/v3 v3.0.5 间接依赖 go
github.com/kr/pretty v0.3.1 间接依赖 go
github.com/pbnjay/memory v0.0.0-20210728143218-7b4eea64cf58 直接依赖 go
rsc.io/tmplfunc v0.0.3 间接依赖 go
github.com/pion/stun v0.6.0 直接依赖 go
gopkg.in/natefinch/lumberjack.v2 v2.2.1 直接依赖 go
modernc.org/strutil v1.2.0 间接依赖 go
github.com/google/btree v1.1.2 直接依赖 go
github.com/libp2p/go-libp2p v0.31.0 直接依赖 go
golang.org/x/exp v0.0.0-20230905200255-921286631fa9 直接依赖 go
github.com/imdario/mergo v0.3.11 间接依赖 go
github.com/mikioh/tcpopt v0.0.0-20190314235656-172688c1accc 间接依赖 go
github.com/ajwerner/btree v0.0.0-20211221152037-f427b3e689c0 间接依赖 go
github.com/supranational/blst v0.3.11 间接依赖 go
github.com/edsrzf/mmap-go v1.1.0 直接依赖 go
github.com/pion/transport/v2 v2.0.0 间接依赖 go
github.com/pmezard/go-difflib v1.0.0 间接依赖 go
github.com/opencontainers/runtime-spec v1.0.2 间接依赖 go
github.com/antlr4-go/antlr/v4 v4.13.0 间接依赖 go
github.com/go-llsqlite/adapter v0.0.0-20230912124304-94ed0e573c23 间接依赖 go
github.com/grpc-ecosystem/go-grpc-middleware v1.4.0 直接依赖 go
github.com/gballet/go-verkle v0.0.0-20221121182333-31427a1f2d35 直接依赖 go
github.com/mitchellh/mapstructure v1.5.0 间接依赖 go
github.com/google/gofuzz v1.2.0 直接依赖 go
github.com/mmcloughlin/addchain v0.4.0 间接依赖 go
modernc.org/sqlite v1.26.0 间接依赖 go
github.com/multiformats/go-multiaddr v0.12.1 直接依赖 go
github.com/go-sourcemap/sourcemap v2.1.3+incompatible 间接依赖 go
github.com/modern-go/concurrent v0.0.0-20180306012644-bacd9c7ef1dd 间接依赖 go
github.com/inconshreveable/mousetrap v1.1.0 间接依赖 go
modernc.org/memory v1.6.0 间接依赖 go
github.com/anacrolix/generics v0.0.0-20230816105729-c755655aee45 间接依赖 go
github.com/go-logr/logr v1.2.4 间接依赖 go
github.com/mattn/go-colorable v0.1.13 间接依赖 go
github.com/matryer/moq v0.3.3 直接依赖 go
github.com/mitchellh/reflectwalk v1.0.0 间接依赖 go
github.com/spf13/cobra v1.8.0 直接依赖 go
github.com/benbjohnson/clock v1.3.5 间接依赖 go
github.com/ipfs/go-log/v2 v2.5.1 间接依赖 go
github.com/pion/rtp v1.7.13 间接依赖 go
golang.org/x/net v0.19.0 间接依赖 go
github.com/koron/go-ssdp v0.0.4 间接依赖 go
modernc.org/libc v1.24.1 间接依赖 go
go.opentelemetry.io/otel/trace v1.8.0 间接依赖 go
github.com/pelletier/go-toml/v2 v2.1.0 直接依赖 go
github.com/rogpeppe/go-internal v1.12.0 间接依赖 go
google.golang.org/protobuf v1.32.0 直接依赖 go
github.com/mschoch/smat v0.2.0 间接依赖 go
github.com/erigontech/mdbx-go v0.27.21 直接依赖 go
google.golang.org/grpc/cmd/protoc-gen-go-grpc v1.3.0 直接依赖 go
github.com/pion/turn/v2 v2.0.8 间接依赖 go
github.com/godbus/dbus/v5 v5.1.0 间接依赖 go
github.com/pion/transport v0.13.1 间接依赖 go
github.com/remyoudompheng/bigfft v0.0.0-20230129092748-24d4a6f8daec 间接依赖 go
github.com/gorilla/websocket v1.5.1 直接依赖 go
github.com/anacrolix/torrent v1.52.6-0.20231201115409-7ea994b6bbd8 直接依赖 go
github.com/minio/sha256-simd v1.0.1 间接依赖 go
github.com/nxadm/tail v1.4.9-0.20211216163028-4472660a31a6 直接依赖 go
github.com/gorilla/websocket v1.5.0 间接依赖 go
lukechampine.com/blake3 v1.2.1 间接依赖 go
github.com/hashicorp/golang-lru/arc/v2 v2.0.6 直接依赖 go
github.com/cespare/xxhash/v2 v2.2.0 间接依赖 go
github.com/mitchellh/copystructure v1.0.0 间接依赖 go
github.com/shopspring/decimal v1.2.0 间接依赖 go
github.com/pion/stun v0.3.5 间接依赖 go
github.com/davecgh/go-spew v1.1.1 直接依赖 go
google.golang.org/genproto/googleapis/rpc v0.0.0-20231002182017-d307bd883b97 间接依赖 go
github.com/quic-go/quic-go v0.38.2 间接依赖 go
go.etcd.io/bbolt v1.3.6 间接依赖 go
github.com/multiformats/go-multicodec v0.9.0 间接依赖 go
github.com/Masterminds/sprig/v3 v3.2.3 直接依赖 go
github.com/mattn/go-isatty v0.0.19 间接依赖 go
github.com/jackpal/go-nat-pmp v1.0.2 直接依赖 go
github.com/erigontech/mdbx-go v0.27.22 直接依赖 go
github.com/docker/go-units v0.5.0 间接依赖 go
github.com/urfave/cli/v2 v2.27.1 直接依赖 go
github.com/libp2p/go-yamux/v4 v4.0.1 间接依赖 go
github.com/libp2p/go-flow-metrics v0.1.0 间接依赖 go
github.com/quic-go/qpack v0.4.0 间接依赖 go
github.com/consensys/gnark-crypto v0.12.1 直接依赖 go
github.com/pion/webrtc/v3 v3.1.42 间接依赖 go
github.com/libp2p/go-libp2p-asn-util v0.3.0 间接依赖 go
github.com/pion/sctp v1.8.2 间接依赖 go
modernc.org/memory v1.7.2 间接依赖 go
github.com/deckarep/golang-set v1.8.0 直接依赖 go
github.com/multiformats/go-multiaddr-dns v0.3.1 间接依赖 go
github.com/c2h5oh/datasize v0.0.0-20220606134207-859f65c6625b 直接依赖 go
github.com/anacrolix/missinggo/perf v1.0.0 间接依赖 go
github.com/agnivade/levenshtein v1.1.1 间接依赖 go
github.com/go-stack/stack v1.8.1 直接依赖 go
github.com/fjl/gencodec v0.0.0-20220412091415-8bb9e558978c 直接依赖 go
github.com/thomaso-mirodin/intmath v0.0.0-20160323211736-5dc6d854e46e 直接依赖 go
golang.org/x/mod v0.14.0 间接依赖 go
github.com/francoispqt/gojay v1.2.13 间接依赖 go
github.com/pion/datachannel v1.5.2 间接依赖 go
github.com/gogo/protobuf v1.3.2 间接依赖 go
github.com/valyala/fastjson v1.6.4 直接依赖 go
github.com/kballard/go-shellquote v0.0.0-20180428030007-95032a82bc51 间接依赖 go
lukechampine.com/uint128 v1.3.0 间接依赖 go
github.com/spf13/cast v1.3.1 间接依赖 go
github.com/google/cel-go v0.18.2 直接依赖 go
github.com/russross/blackfriday/v2 v2.1.0 间接依赖 go
github.com/erigontech/silkworm-go v0.12.0 直接依赖 go
github.com/anacrolix/upnp v0.1.3-0.20220123035249-922794e51c96 间接依赖 go
github.com/mr-tron/base58 v1.2.0 间接依赖 go
github.com/anacrolix/log v0.14.3-0.20230823030427-4b296d71a6b4 直接依赖 go
github.com/consensys/bavard v0.1.13 间接依赖 go
github.com/coreos/go-systemd/v22 v22.5.0 间接依赖 go
github.com/tidwall/btree v1.6.0 直接依赖 go
github.com/multiformats/go-multistream v0.4.1 间接依赖 go
golang.org/x/sys v0.16.0 直接依赖 go
github.com/ledgerwatch/erigon-lib v1.0.0 直接依赖 go
github.com/jbenet/go-temp-err-catcher v0.1.0 间接依赖 go
github.com/elastic/gosigar v0.14.2 间接依赖 go
github.com/google/uuid v1.3.1 直接依赖 go
golang.org/x/crypto v0.18.0 直接依赖 go
github.com/anacrolix/multiless v0.3.1-0.20221221005021-2d12701f83f7 间接依赖 go
github.com/xrash/smetrics v0.0.0-20201216005158-039620a65673 间接依赖 go
github.com/anacrolix/sync v0.4.0 直接依赖 go
github.com/anacrolix/missinggo/v2 v2.7.2-0.20230527121029-a582b4f397b9 间接依赖 go
gopkg.in/yaml.v3 v3.0.1 直接依赖 go
github.com/pion/mdns v0.0.5 间接依赖 go
go.uber.org/dig v1.17.0 间接依赖 go
github.com/cilium/ebpf v0.9.1 间接依赖 go
github.com/anacrolix/stm v0.4.1-0.20221221005312-96d17df0e496 间接依赖 go
github.com/matttproud/golang_protobuf_extensions/v2 v2.0.0 间接依赖 go
github.com/spf13/afero v1.9.5 直接依赖 go
gopkg.in/tomb.v1 v1.0.0-20141024135613-dd632973f1e7 间接依赖 go
github.com/quic-go/qtls-go1-20 v0.3.3 间接依赖 go
github.com/ledgerwatch/secp256k1 v1.0.0 直接依赖 go
github.com/decred/dcrd/dcrec/secp256k1/v4 v4.2.0 间接依赖 go
github.com/pion/randutil v0.1.0 直接依赖 go
github.com/davidlazar/go-crypto v0.0.0-20200604182044-b73af7476f6c 间接依赖 go
github.com/emicklei/dot v1.6.1 直接依赖 go
github.com/ledgerwatch/erigon-snapshot v1.3.1-0.20240214034330-a436079c93ec 直接依赖 go
github.com/pion/rtcp v1.2.9 间接依赖 go
gopkg.in/yaml.v2 v2.4.0 直接依赖 go
github.com/prysmaticlabs/go-bitfield v0.0.0-20210809151128-385d8c5e3fb7 直接依赖 go
github.com/pion/udp v0.1.4 间接依赖 go
github.com/spf13/pflag v1.0.5 直接依赖 go
github.com/coreos/go-systemd/v22 v22.3.2 间接依赖 go
github.com/go-chi/chi/v5 v5.0.11 直接依赖 go
gopkg.in/check.v1 v1.0.0-20201130134442-10cb98267c6c 直接依赖 go
github.com/spaolacci/murmur3 v1.1.0 直接依赖 go
github.com/anacrolix/go-libutp v1.3.1 直接依赖 go
github.com/golang/snappy v0.0.5-0.20220116011046-fa5810519dcb 直接依赖 go
github.com/pion/transport/v2 v2.2.1 间接依赖 go
github.com/protolambda/ztyp v0.2.2 直接依赖 go
modernc.org/ccgo/v3 v3.16.15 间接依赖 go
github.com/raulk/go-watchdog v1.3.0 间接依赖 go
github.com/containerd/cgroups v1.1.0 间接依赖 go
google.golang.org/genproto/googleapis/api v0.0.0-20231002182017-d307bd883b97 间接依赖 go
github.com/pkg/errors v0.9.1 间接依赖 go
github.com/anacrolix/envpprof v1.3.0 间接依赖 go
github.com/holiman/uint256 v1.2.3 直接依赖 go
github.com/vektah/gqlparser/v2 v2.5.10 直接依赖 go
github.com/deckarep/golang-set/v2 v2.3.1 直接依赖 go
zombiezen.com/go/sqlite v0.13.1 间接依赖 go
github.com/docker/docker v1.6.2 直接依赖 go
github.com/pion/dtls/v2 v2.2.4 间接依赖 go
github.com/multiformats/go-multibase v0.2.0 间接依赖 go
github.com/huandu/xstrings v1.4.0 直接依赖 go
go.opentelemetry.io/otel v1.8.0 间接依赖 go
github.com/libp2p/go-cidranger v1.1.0 间接依赖 go
gfx.cafe/util/go/generic v0.0.0-20230721185457-c559e86c829c 直接依赖 go
github.com/Masterminds/semver/v3 v3.2.0 间接依赖 go
github.com/fsnotify/fsnotify v1.5.4 间接依赖 go
github.com/google/gopacket v1.1.19 间接依赖 go
github.com/gfx-labs/sse v0.0.0-20231226060816-f747e26a9baa 直接依赖 go
github.com/libp2p/go-mplex v0.7.0 间接依赖 go
github.com/multiformats/go-base32 v0.1.0 间接依赖 go
golang.org/x/tools v0.16.0 间接依赖 go
github.com/ledgerwatch/interfaces v0.0.0-20240203142514-1cf37a5264cc 直接依赖 go
github.com/btcsuite/btcd/btcec/v2 v2.1.3 直接依赖 go
github.com/gofrs/flock v0.8.1 直接依赖 go
github.com/rs/dnscache v0.0.0-20211102005908-e0241e321417 间接依赖 go
github.com/anacrolix/utp v0.1.0 间接依赖 go
github.com/prometheus/client_model v0.5.0 直接依赖 go
github.com/crate-crypto/go-ipa v0.0.0-20221111143132-9aa5d42120bc 直接依赖 go
github.com/marten-seemann/tcp v0.0.0-20210406111302-dfbc87cc63fd 间接依赖 go
github.com/prometheus/procfs v0.12.0 间接依赖 go
github.com/quasilyte/go-ruleguard/dsl v0.3.22 直接依赖 go
github.com/anacrolix/missinggo v1.3.0 间接依赖 go
github.com/libp2p/go-libp2p-pubsub v0.9.3 直接依赖 go
github.com/benesch/cgosymbolizer v0.0.0-20190515212042-bec6fe6e597b 直接依赖 go
github.com/goccy/go-json v0.9.11 直接依赖 go
github.com/maticnetwork/crand v1.0.2 直接依赖 go
github.com/pion/ice/v2 v2.2.6 间接依赖 go
github.com/btcsuite/btcd/chaincfg/chainhash v1.0.1 间接依赖 go
github.com/sosodev/duration v1.1.0 间接依赖 go
github.com/miekg/dns v1.1.55 间接依赖 go
(0)
上一篇 2024年2月16日
下一篇 2024年2月16日

相关推荐

  • Astrotomic/laravel-translatable 软件分析报告

    基础信息 项目名称:Astrotomic/laravel-translatable 项目徽章: 仓库地址:https://github.com/pterodactyl/panel 检测报告地址:https://www.murphysec.com/console/report/1722025650307493888/1722025650345242624 此报…

    软件分析 2023年11月8日
    0
  • bo-blog/bw 软件分析报告

    基础信息 项目名称:bo-blog/bw 项目徽章: 仓库地址:https://github.com/pterodactyl/panel 检测报告地址:https://www.murphysec.com/console/report/1716402433017298944/1716402461618257920 此报告由Murphysec提供 漏洞列表 暂无…

    软件分析 2023年10月23日
    0
  • zzmp/juliusjs 软件分析报告

    基础信息 项目名称:zzmp/juliusjs 项目徽章: 仓库地址:https://github.com/pterodactyl/panel 检测报告地址:https://www.murphysec.com/console/report/1724848989064351744/1724848989110489088 此报告由Murphysec提供 漏洞列表…

    软件分析 2023年11月16日
    0
  • callmez/yii2-wechat-sdk 软件分析报告

    基础信息 项目名称:callmez/yii2-wechat-sdk 项目徽章: 仓库地址:https://github.com/pterodactyl/panel 检测报告地址:https://www.murphysec.com/console/report/1716554355284164608/1716554355653263360 此报告由Murphy…

    软件分析 2023年10月24日
    0
  • DenisKolodin/yew 软件分析报告

    基础信息 项目名称:DenisKolodin/yew 项目徽章: 仓库地址:https://github.com/pterodactyl/panel 检测报告地址:https://www.murphysec.com/console/report/1717120357461966848/1717120358418268160 此报告由Murphysec提供 漏…

    软件分析 2023年10月25日
    0